Skip to content
OpenAdvisories
Unscored CVE-2018-17862 EUVD-2018-9604GHSA-873r-2ww2-8875

A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys…

Published Aug 9, 2021 · Updated Aug 5, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /TestJDBC_Web/test2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References